Personal opinion: Not really. Unless you're letting the user create an account / taking other information from them, there's no need for a privacy policy or TOS. EULAs generally aren't a bad idea, but nobody is going to care or notice if you don't have one. Certainly don't force it on the user at any point, but if you want to bury it somewhere, sure.

You can just copy and modify any document you see. Or you could always use Plain English. Then people might actually read it. All they really need to be concerned about is you accessing their data, you sharing their data, and you posting to Facebook without their explicit permission. Make it clear what you're doing there and that's really all you need to say. Should only take a few sentences.